Healthie
Local ready
Privacy & Clinical Safety Policy

Healthie Privacy Policy & Data Stewardship

Effective Date: October 2026 · Applies to Healthie Web & Mobile

Medical Disclaimer

Healthie is an informational personal health log and self-tracking companion. It is not a medical device and does not diagnose, treat, cure, or prevent any disease. Blood pressure classifications follow the published AHA/ACC 2017 High Blood Pressure Clinical Practice Guideline for educational awareness only. Never change or discontinue medication without consulting a qualified clinician. If you experience chest pain, shortness of breath, neurological symptoms, or blood pressure above 180/120 mmHg, contact emergency services immediately.

1. Local-First Storage by Default

By default, every measurement, goal, reminder, and profile setting you record in Healthie Web is stored locally inside your browser's IndexedDB database (via Dexie). You can use all core logging, trending, analytics, and export features without creating an account or transmitting health data over the network.

  • No third-party ad or analytics trackers: Healthie includes zero ad pixels, session replay scripts, or third-party behavioral analytics.
  • No health values in URLs or logs: Measurement values are never placed in query strings, URL paths, or application console/server logs.
  • Service Worker Cache isolation: Our Progressive Web App Service Worker caches only static application shell assets. All /api/* responses are explicitly excluded from browser Cache Storage.

2. Opt-In Cloud Sync & Neon Postgres Processor

If you explicitly create an account and enable Cloud Sync in Profile & Settings, your measurements, profile, goals, and reminders are synchronized with our cloud database so you can back up and access your records across devices.

  • Cloud Database Processor: Cloud-synced data is stored in Neon (serverless PostgreSQL) over TLS-encrypted connections with AES-256 encryption at rest.
  • Strict Per-User Isolation: Every query enforces both application-layer user_id filtering and PostgreSQL Row-Level Security (RLS) policies scoped to your authenticated session.
  • Authentication Security: Web sessions use first-party HttpOnly, Secure, SameSite=Lax cookies. Auth tokens are never stored in localStorage.
  • Branch Hygiene: Production data is never copied into preview or development Neon branches without synthetic anonymization, and ephemeral preview branches are automatically expired.

3. Full Data Portability (Offline JSON & CSV Export)

Your health data belongs to you. At any time—even while offline—you can export a complete, human-readable copy of your measurements, profile, goals, and reminders in structured JSON (schemaVersion: 1) or spreadsheet-ready CSV format from the Profile or History screens.

4. Right to Erasure & Account Deletion

You can permanently erase your local IndexedDB store (“Clear Local Device Data”) or permanently delete your cloud account (“Delete Account & Data”) directly from Profile & Settings. Cloud account deletion cascades across all measurements, goals, reminders, profile records, sync cursors, and active sessions in Neon Postgres immediately.